U.K. Study Finds only 15% of People Sufficiently Know How to Protect Themselves Online

Apr 29, 2019 6:46:04 AM By Stu Sjouwerman

With 80% of people saying cybersecurity is a priority, the disparity between what they believe is important and their ability to protect themselves puts organizations at risk.

Cryptojacking Phishing Attacks Target Enterprises With NSA-Linked Exploits

Apr 26, 2019 11:45:15 AM By Stu Sjouwerman

Summary: Researchers at Symantec are tracking a cryptojacking campaign that —for now—seems mostly to affect businesses in China. They're calling the campaign "Beapy," and the worm ...

PDFs Return as Phishbait

Apr 25, 2019 7:19:58 AM By Stu Sjouwerman

The use of malware-laden PDF email attachments has spiked in recent months, internet security company SonicWall has found. Over the course of 2018, SonicWall detected 47,000 new attack ...

Scott County Schools victim of $3.7 million CEO Fraud Phishing Scam

Apr 25, 2019 7:02:35 AM By Stu Sjouwerman

GEORGETOWN, Ky. (WKYT) - Scott County Schools has announced the district is a victim of a multi-million dollar online CEO fraud scam.

[BREAKING NEWS] US Supreme Court Curbs Class Action Lawsuits Caused By W-2 Phishing Fraud

Apr 24, 2019 4:56:06 PM By Stu Sjouwerman

BREAKING NEWS: The upshot: This case made it all the way to the Supreme Court and sets a new precedent. A phished employee sent out 1,300 confidential employee W-2 data.

[Heads up] Sneaky Phishing Attacks Exploit Legitimate Services & Platforms to Fly Below Your AV's Radar

Apr 24, 2019 2:14:59 PM By Stu Sjouwerman

By Eric Howes, KnowBe4 Principal Lab Researcher. Over the last few months, we have seen a rising trend of the bad guys using legitimate services—mainly file hosting platforms, but also ...

Phishing Emails Will Always Get Through

Apr 24, 2019 2:12:51 PM By Stu Sjouwerman

Attackers have proven their ability to adapt to improved security measures, and organizations should never assume they’re safe from phishing emails, says Paul Gillin at SiliconANGLE.

Executives are Out and Employees are In as Cybercriminals Change Their Primary Targets for Cyberattack

Apr 24, 2019 7:18:42 AM By Stu Sjouwerman

Phishing and Social Engineering scammers are shifting tactics, focusing efforts on low-level employees using a variety of methods as a means to cast a wider net within a targeted ...

Phishing Attacks See Massive Increases and Improvements in Execution with Social Engineering at the Helm

Apr 24, 2019 7:15:22 AM By Stu Sjouwerman

With 98% of malicious emails that hit inboxes containing no malware, the evolution and future of the phish lies squarely in the hands of effective social engineering.

Manufacturing giant Aebi Schmidt hit by ransomware

Apr 23, 2019 5:33:36 PM By Stu Sjouwerman

Aebi Schmidt, a European manufacturing giant with operations in the U.S., has been hit by a ransomware attack, TechCrunch has learned.

PayPal receives patent for ransomware detection technology

Apr 23, 2019 12:11:35 PM By Stu Sjouwerman

The United States Patent and Trademark Office has granted this week a patent to online payments company PayPal for a technique for detecting and stopping ransomware attacks.

Evil TeamViewer Attacks Under the Guise of the U.S. State Department

Apr 23, 2019 11:43:25 AM By Stu Sjouwerman

A targeted, email-borne attack against embassy officials and government finance authorities globally is making use of a malicious attachment disguised as a top-secret U.S. document. It ...

CyberheistNews Vol 9 #17 [Heads-Up] Slippery Phishing Attack Spoofs Email Security Firm

Apr 23, 2019 9:44:38 AM By Stu Sjouwerman

Why Ransomware Continues to Be an Immensely Profitable Business for Bad Actors

Apr 23, 2019 7:25:48 AM By Stu Sjouwerman

Ransomware, arguably the most efficient malware used by cybercrooks in recent years, continues to wreak havoc on a global scale, affecting everyone and everything, from regular Internet ...

Spearphishing Boils Down to Basic Social Engineering

Apr 23, 2019 7:13:50 AM By Stu Sjouwerman

While spearphishing attacks may employ various tactics and tools, they all rely on the same underlying human weaknesses to achieve their goals, according to Asaf Cidon from Barracuda ...

Social Engineers Earn a First

Apr 23, 2019 7:09:17 AM By Stu Sjouwerman

A study by nonprofit research company Jisc and the UK’s Higher Education Policy Institute (HEPI) found that 100 percent of spear phishing tests against universities were able to gain ...

Florida Spearphishing: Meddle Globally, Phish Locally

Apr 22, 2019 6:58:17 AM By Stu Sjouwerman

Russian intelligence services sent spearphishing emails to more than 120 email accounts used by Florida election officials in November 2016, according to Special Counsel Robert Mueller’s ...

The Cost of Paying in a Ransomware Attack Nearly Doubles While Downtime Also Increases

Apr 22, 2019 6:49:25 AM By Stu Sjouwerman

The latest data from Coveware shows increases across the board in ransoms, downtime, and average cost of an attack, mostly due to the increased use of the Ryuk ransomware variant.

U.K. Government: "80% Of Organizations Experience Phishing Attacks"

Apr 22, 2019 6:42:06 AM By Stu Sjouwerman

Despite maintaining an improved security posture over last year, 2019 brings additional attacks with a higher price tag, causing the U.K. government to urge organizations to do more.

Ohio Becomes the Third U.S. State to Adopt the NAIC’s Insurance Data Security Model Law

Apr 22, 2019 6:34:13 AM By Stu Sjouwerman

Ohio joins South Carolina and Michigan to create cybersecurity legislation modeled after the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law.

Security Awareness Training Blog

View Topics